ADMIN.FOUNDATION – Page 403 – cybersecurity / defense / intelligence

Apple Adds ClickFix Attack Warnings in New macOS Tahoe Security Feature

·

Apple, cyber security, Cyber Security News, macOS

Apple has silently introduced a new security mechanism in macOS Tahoe 26.4 to protect users against social engineering campaigns known as ClickFix attacks. This defense intercepts potentially harmful commands before they are pasted into the Terminal application, breaking the infection chain. The ClickFix Attack Methodology ClickFix is a sophisticated social engineering technique designed to bypass […]

The post Apple Adds ClickFix Attack Warnings in New macOS Tahoe Security Feature appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Tax Filing Scams Used to Deliver Malware in New Cybercrime Campaigns

·

cyber security, Cyber Security News, Malware

Cybercriminals are once again exploiting global tax seasons, abusing IRS and tax filing lures to deliver malware, remote monitoring and management (RMM) tools, and credential phishing in a wave of new 2026 campaigns. Security researchers have already tracked more than a hundred tax-themed operations worldwide, with a noticeable increase in the use of legitimate RMM […]

The post Tax Filing Scams Used to Deliver Malware in New Cybercrime Campaigns appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
CareCloud Data Breach Exposes Patient Data After Hackers Access IT Systems

·

cyber security, Cyber Security News, Data Breach

CareCloud, Inc., a prominent healthcare technology provider, has disclosed a material cybersecurity incident involving unauthorized access to its electronic health record (EHR) infrastructure. The security event was first detected on March 16, 2026, when the CareCloud Health division experienced an unexpected network disruption. An unauthorized third party successfully breached one of the company’s six EHR […]

The post CareCloud Data Breach Exposes Patient Data After Hackers Access IT Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
DeepLoad Malware Uses ClickFix and AI Evasion to Hit Enterprise Networks

·

AI, cyber security, Cyber Security News, Malware

New “DeepLoad” malware is turning a single user click into fileless, credential‑stealing persistence inside enterprise networks, leveraging the ClickFix technique and AI-generated obfuscation to evade traditional defenses. DeepLoad arrives via ClickFix a social engineering technique that instructs users to paste a “fix” command into Windows Run or a terminal, making the action appear to be […]

The post DeepLoad Malware Uses ClickFix and AI Evasion to Hit Enterprise Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
ChatGPT Vulnerability Enabled Silent Leakage of Prompts and Sensitive Information

·

ChatGPT, CVE/vulnerability, cyber security, Cyber Security News, vulnerability

Artificial intelligence assistants increasingly handle our most sensitive data, operating under the assumption that enclosed environments keep this information secure. However, a newly disclosed vulnerability in ChatGPT shattered this expectation. Discovered by Check Point Research, this flaw exploited the isolated code execution runtime to establish a covert outbound communication channel, effectively turning standard chat sessions […]

The post ChatGPT Vulnerability Enabled Silent Leakage of Prompts and Sensitive Information appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

·

The popular HTTP client known as Axios has suffered a supply chain attack after two newly published versions of the npm package introduced a malicious dependency. Versions 1.14.1 and 0.30.4 of Axios have been found to inject “plain-crypto-js” version 4.2.1 as a fake dependency. According to StepSecurity, the two versions were published using the compromised npm credentials of the primary Axios

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
RoadK1ll Malware Turns Hacked Devices Into Network Relays

·

cyber security, Cyber Security News, Malware

Hackers are deploying a new Node. js-based implant dubbed RoadK1ll to quietly turn compromised hosts into on-demand network relays, enabling stealthy pivoting deeper into victim environments without exposing obvious remote access tooling. The implant’s sole purpose is to provide attackers with reliable, flexible access back into an internal network after initial compromise, effectively turning a single infected […]

The post RoadK1ll Malware Turns Hacked Devices Into Network Relays appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Claude AI Uncovers Zero-Day RCE Vulnerabilities in Vim and Emacs

·

CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability

Security researchers at Calif recently demonstrated the evolving power of artificial intelligence in vulnerability research by using Claude AI to uncover zero-day Remote Code Execution (RCE) flaws in both Vim and Emacs. The discoveries show that merely opening a malicious file in these popular text editors could allow attackers to execute arbitrary code and fully […]

The post Claude AI Uncovers Zero-Day RCE Vulnerabilities in Vim and Emacs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
GhostSocks Hijacks Devices as Proxy Network for Stealthy Cyberattacks

·

Cyber Attack, cyber security, Cyber Security News

A newly emerging malware known as GhostSocks is quietly reshaping how attackers evade detection by converting compromised systems into residential proxy nodes. Modern cyberattacks rely heavily on blending into normal network traffic. Residential proxies allow attackers to route malicious activity through legitimate home IP addresses, making it appear as if traffic originates from ordinary users […]

The post GhostSocks Hijacks Devices as Proxy Network for Stealthy Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Notepad++ v8.9.3 Released With Fixes for cURL Security Flaw and Crash Bugs

·

cyber security, Cyber Security News, vulnerability

Notepad++ rolled out version 8.9.3, an important update addressing a notable cURL security vulnerability and resolving multiple crash bugs. Alongside these vital security patches, this release marks the official completion of the application’s migration to a new XML parser, significantly improving the performance of configuration file operations. The most critical aspect of the v8.9.3 update […]

The post Notepad++ v8.9.3 Released With Fixes for cURL Security Flaw and Crash Bugs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶